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Claims 



What is claimed is: 

1 . A systerr 
comprising: 



for implementing behavioral operations, 



a search engine : 
an associative 

and 

a behavioral 
memory. 



connected to an input data; 
match memory connected to the search engine; 



operation unit connected to the associative match 



2. The system 
array connected to tl 



3. The sy sterji 
memory includes an 
entry. 



4. The system 
memory includes a fie 



of claim 1, further including a field descriptor 
associative memory. 



of claim 1, wherein the associative match 
ssociation and a behavioral indicator in an 



of claim 1, wherein the associative match 
d descriptor in an entry. 



5. The systen of claim 3, wherein the behavioral indicator 
is an association set. 
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6. The system of claim 3, wherein the behavioral indicator 
is a qualifier set. 



7. The sys 
is a test set. 

8. The sys 
score field. 

9. The sys 
is a stack set. 

10. The sys 
is an exclusion set. 



em of claim 3, wherein the behavioral indicator 



em of claim 7, wherein the test set includes a 



em of claim 3, wherein the behavioral indicator 



em of claim 3, wherein the behavioral indicator 



11. The system of claim 3, wherein the behavioral indicator 
is a continuation sen;. 



12. The system of claim 2, wherein the field descriptor array 
includes a byte offset. 



13. The syfctem of claim 2, wherein the field descriptor array 
includes a mask. 
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14. A method of behavioral operation of a data document, 



comprising the steps 



a) scanning an 

b) when a matt 
associated with the 

c) when the behavioral 
association in the 



of: 



input data to find a match; 
h is found determining a behavioral set 
i^iatch; and 

set is an association set, using an 
match to acquire a desired information. 



15. The method of claim 14, further including the steps of: 

d) when the behavioral set is a qualifier set, determining a 
field descriptor pointer; 

e) looking up a : ield descriptor pointed to by the field 
descriptor pointer; 

f) determining a field to be examined. 

16. The method of claim 15, further including the steps of: 



g) determining a mask associated with the field descriptor; 

h) applying the makk to the field to form a masked field. 



* 
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17. The mdthod of claim 16, further including the steps of: 



j) transformin 
match is found; 

1) when the 
behavioral set and 



I the masked field to determine if a second 



second match is found, determining a second 
repeating the process. 



18. The metiod of claim 14, further including the steps of: 

d) when the behavioral set is a test set, determining a score 
with the match; 

e) comparing /the score to a previous score; 

f) when a prdvious score is lower than the score, examining an 
test association. 



19. The method of claim 18, wherein step (f) includes the 
step of pushing thfe test association onto an association stack. 

20. The njethod of claim 18, further including the step of: 



g) when a 
the test association 



revious score is not lower than the score, ignoring 



v 
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21. The metiod of claim 14, further including the step of: 



d) when the 
present association 



behavioral set is an exclusion set, removing a 
Tom an association stack. 



22. The method of claim 14, further including the step of: 



d) when the behavioral set is a continuation set, a related 
association is returned and processing continues. 

23. The method of claim 14, further including the step of: 

d) when the behkvioral set is a stack set, continuing a search in 
an associative match memory for a duplicate. 



24. A method df behavioral operation of a data document 
comprising the steps ofl 



a) matching a pattern of data; 

b) determining a behavior set associated with the pattern; and 

c) performing an abtion indicated by the behavioral set. 



# t 
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25. The metliod of claim 24, wherein step (a) further includes 
the steps of: \ 

al) determining an icon for the pattern; 
a2) performing an associative lookup using the icon to 
determine if a match exists. 

26. The method df claim 24, wherein step (c) further includes 
the steps of: I 

cl) storing an ^association; 

c2) acquiring ah information using the association. 

27. The method of alaim 24, wherein step (c) further includes 
the steps of: \ 



cl) determining a 



new field of data to be examined. 



